Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Search
Splunk Community
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Search
Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
9,059 results
Sort by:
04-09-2020
03:49 AM
If any one could help me clarifying these ...that would help.
UniversalForwarder can send data at a time to "One" indexer only ? A UF cannot be configured to send data to multiple indexes in the...
- Tags:
- splunk-enterprise
Labels
- Labels:
-
universal forwarder
03-17-2023
01:26 AM
Hello Community,
I am having issues connecting my Universal Forwarder with a Heavy Forwarder.
I have the following set up: UF-->HF-->IDx
I can see the logs from HF to IDx, but not sure w...
Labels
Show results in replies (4)
-
...t;IDX because it's the same thing. You can use SSL in both of them or not, as you like. About the...
-
Hi @gcusello , Thanks for the reply. I wanted to ask, may I use the same connection mechanism o...
-
Hi @DanAlexander, at first check if you enabled receiving in the HF, and if you correctly c...
-
Hi @gcusello, Your time is much appreciated! Thank you very much, I am sure I can manage it...
04-06-2022
09:08 PM
hi all,
how can i send the same data from one universal forwarder to multiple universal forwarder ?
is there a way to configure this ? if yes, please tell me the process.
Labels
- Labels:
-
configuration
Show results in replies (7)
-
Yes you can but it will hit the license meter twice so you need to cautious about that.&n...
-
You can specify multiple outputs in the outputs.conf file - each event will be sent to all d...
-
can we transfer the same data from SplunkUF to two different groups? @PickleRick @mayurr98
-
It's not that simple. Splunk counts the licence usage based on raw data that is written to i...
-
it should be the same way you generally forward data to indexing tier [tcpout] d...
-
...ach event would get forwarded to one of the destinations from the group only. It would not get forward...
-
...o that each event gets forwarded to all of those groups.
12-18-2023
08:01 AM
Hi Splunkers, I have a strange situation about a some universal forwarders. On some Windows host, a colleague has installed the UF using the graphical wizards. Those forwarders must be managed w...
Labels
12-23-2021
11:07 AM
Hello, I am new to Splunk and working on getting our environment setup correctly. I have a SC4S server setup and working. My question is about UF installed on Windows servers and W...
Labels
- Labels:
-
universal forwarder
08-24-2022
07:39 AM
Hello,
"The ingestion certificates on xxxx Splunk Cloud environment xxx Universal Forwarder certificate package, will be expiring on x/xx/2022. In order to ensure that ingestion is not disrupted, w...
Labels
- Labels:
-
configuration
-
using Splunk Cloud
06-18-2018
03:46 AM
Hi
My universal forwarder is taking about 30GB and my IT guys are asking is this normal.
I have just restarted it and then upgrade it to the latest 7.1.1, but with in 20 minutes it has gone f...
09-29-2012
03:52 AM
1 Karma
Hello
I have a Universal Forwarder that acts as an intermediary forwarder between about 200 other UFs and the Indexer. Data from the client UFs gets delayed or not sent at all and digging through the...
01-20-2021
11:30 AM
Hi! I have a local setup where I have splunk Enterprise, and a single universal forwarder monitoring an arbitrary Documents folder: The forwarder is set up to send entire files to splunk with the...
Labels
- Labels:
-
universal forwarder
02-07-2019
10:00 AM
I replaced a very old heavy forwarder today with a universal forwarder that some of our network gear was pointing syslogs too. The flip went smooth but we quickly noticed that the number of logs w...
